November 2026
17 mins

Swiss SRO for a Crypto OTC Desk in 2027: Licence, AML and Banking Requirements

At a glance

1. A Swiss crypto OTC desk does not receive a special “OTC licence”. Its regulatory route depends on what it trades, whose account it trades for, whether it controls client assets and how orders are executed.

2. A professional business exchanging payment tokens against fiat, arranging transfers or operating custodial wallets will normally fall within the Swiss Anti-Money Laundering Act. If no higher FINMA licence applies, it generally needs membership in a FINMA-recognised self-regulatory organisation before starting the regulated activity. [1, 2, 3]

3. SRO membership is AML supervision, not prudential authorisation. It does not permit the desk to accept public deposits, hold payment tokens in collective custody, trade securities as a securities firm or operate a regulated trading venue. [1, 4, 5]

4. The operating model must be frozen before the application: principal or agency trading, payment or asset tokens, bilateral execution or multilateral matching, individual or omnibus custody, fiat settlement, external wallets and outsourcing all affect the perimeter.

5. Crypto-specific controls should cover wallet ownership, blockchain analytics, Travel Rule data, high-risk counterparties, source of funds, sanctions and transaction investigations. FINMA continues to apply the Travel Rule to blockchain payments. [6]

6. Banking is a separate workstream. An OTC desk needs a bank and settlement model that match the regulatory file, customer profile, jurisdictions, projected volumes, custody design and source-of-funds controls.

Founders often use “Swiss OTC licence” as shorthand for a company that buys and sells crypto in negotiated transactions. Swiss law does not regulate the label. It regulates the activities, assets, custody structure and role performed by the company.

This guide explains how to design a Swiss crypto OTC desk for a 2027 launch, when SRO membership may be the relevant AML route, which features can trigger a higher FINMA authorisation and what evidence should exist before the company approaches an SRO or banking partner.

1. What is a crypto OTC desk?

An over-the-counter desk executes negotiated transactions outside a public order book. The customer may ask the desk to quote a price, source liquidity, arrange settlement or act as an intermediary. The desk can trade as principal from its own inventory, as agent for a customer or through a hybrid model.

That commercial description is not enough for regulatory classification. Two firms can both advertise “OTC trading” while performing legally different activities:

  • one buys payment tokens from a customer and sells them from its own balance sheet;
  • one introduces the customer to a third-party liquidity provider;
  • one accepts fiat or crypto, routes the order and settles through accounts it controls;
  • one holds customer crypto in individually allocated wallets;
  • one holds crypto in an omnibus wallet and maintains an internal ledger;
  • one matches multiple buyers and sellers through a platform; and
  • one trades asset tokens or derivatives rather than payment tokens.

The regulatory assessment must therefore follow the contractual role, actual flow of assets, private-key control, settlement sequence and legal classification of the tokens.

Information-gain test: draw the transaction from the customer's first instruction to final settlement. Mark every point where the desk receives money, controls a wallet, fixes a price, chooses a counterparty, holds an asset or records a customer claim. Those facts determine the route more reliably than the words “broker”, “exchange” or “OTC”.

2. When can SRO membership be the relevant route?

Article 2 of the Swiss Anti-Money Laundering Act covers persons who professionally accept or hold third-party assets or assist in their investment or transfer. It includes payment services and professional trading for one's own account or for others in foreign exchange, securities, commodities and related instruments. [3]

FINMA states that trading virtual currencies and operating payment systems fall within AMLA. A business subject to AMLA must join a recognised SRO unless it is already supervised under another applicable regime. [2]

For a bilateral desk trading payment tokens against fiat without public deposits, collective custody, securities activity or a regulated trading facility, SRO affiliation may therefore be the central Swiss regulatory step. The SRO supervises AML duties such as customer identification, beneficial-owner identification, risk classification, clarification of unusual activity, record keeping, training and suspicious-activity reporting.

FINMA's 2024 data illustrates that SRO-supervised virtual-asset service providers commonly perform exchange services. Its survey covered 203 VASPs, including inactive firms, and showed exchange services as the largest activity category, followed by crypto-to-crypto exchange, payments and custody. [7]

This does not mean every OTC model fits within SRO membership. The perimeter changes when the business introduces deposit-taking, collective custody, securities, derivatives, market making in securities or multilateral execution.

3. SRO membership is not a Swiss crypto licence

FINMA expressly distinguishes an SRO member from a FINMA-authorised and prudentially supervised financial institution. The SRO is a private-law organisation recognised and supervised by FINMA. It monitors members for AML compliance and may audit, sanction or exclude them. [1]

A customer or bank may colloquially call the status a “Swiss SRO licence”, but the legal result is membership and AML supervision. Marketing materials, contracts and banking packs should describe the status accurately.

StatusWhat it coversWhat it does not prove
SRO membershipAMLA supervision for the activities admitted by the selected SRO.FINMA prudential authorisation, deposit-taking permission or securities-firm status.
FinTech licenceAcceptance of public deposits up to CHF 100 million or collective custody of cryptoassets under the statutory conditions.Permission to invest deposits, pay interest or perform every banking activity.
Banking licenceRegulated banking activity and deposit-taking within the authorised model.Automatic permission for every securities or trading-venue activity.
Securities-firm or market-infrastructure authorisationActivities falling within the relevant securities or trading-venue perimeter.A substitute for the separate AML, product and custody analysis.

4. Regulatory decision matrix for an OTC desk

Operating featureLikely regulatory questionDesign response
Bilateral fiat-to-payment-token trades as principalProfessional financial intermediation under AMLA; SRO route may apply if no higher licence is triggered.Document quote formation, source of liquidity, settlement, customer identification and transaction monitoring.
Agency execution for customersAMLA can apply because the desk assists with the investment or transfer of assets.Define authority, discretion, fees, counterparties and whether the desk ever controls client assets.
Individual on-chain custodyCustodial control is subject to AMLA; banking-law analysis depends on segregation and availability.Use individually attributable addresses, reconcile control and preserve evidence of customer entitlement.
Collective or omnibus custodyMay require a FinTech or banking licence rather than SRO membership alone.Do not build the wallet and ledger architecture before the licence perimeter is settled.
Customer fiat received into the desk's own accountPossible public-deposit and payment-services exposure.Map legal title, duration, settlement purpose, account structure and any exemption relied upon.
Asset tokens or tokenised securitiesSecurities-firm, offering, advisory or market-infrastructure rules may apply.Classify each token and restrict the product catalogue until the securities analysis is complete.
Matching multiple buyers and sellersA bilateral desk can become a trading platform or organised trading facility depending on the model.Define whether customers interact, whether orders are multilateral and how execution rules operate.
Non-custodial software onlyA provider without legal or factual power over assets may fall outside AMLA for that function.Contracts, permissions, recovery tools and administrator access must support the non-custodial claim.

The matrix is a screening tool, not a legal conclusion. A single product can contain several functions, and the strictest applicable regime can determine the route.

5. Principal versus agency trading

A principal desk enters the trade itself. It quotes the customer, becomes the buyer or seller and later offsets the position with a venue, market maker or liquidity provider. The firm should document how quotes are produced, how inventory risk is controlled and when title transfers.

An agency desk executes or arranges a transaction for the customer. The contract should specify whether the desk has discretion, whether it selects counterparties, whether it receives customer assets and whether the customer has a direct relationship with the liquidity provider.

The distinction affects risk and disclosure but does not by itself remove AMLA. Article 2 AMLA reaches both professional own-account trading in specified assets and assistance with investment or transfer activities. [3]

A hybrid model deserves particular care. If the desk sometimes acts as principal and sometimes as agent, each order should show the applicable capacity, price or fee method, counterparty and settlement route. A generic terms-of-business clause is not enough when the actual execution changes from transaction to transaction.

6. Custody and client money determine the upper boundary

Custody design is often the dividing line between an SRO-supervised intermediary and a business requiring prudential authorisation. FINMA distinguishes individual custody from collective custody. Its guidance explains that individual custody of payment tokens held available for the customer can avoid the banking-licence issue, while collective custody can require a FinTech or banking licence. [4]

The analysis should cover both crypto and fiat:

  • Who controls each private key?
  • Are customer assets held on individual addresses or in an omnibus wallet?
  • Can every asset be attributed to one customer at all times?
  • Does the company owe the customer a contractual repayment claim?
  • Does fiat pass through a company account, safeguarded account or direct customer-to-counterparty route?
  • How long can assets remain with the desk?
  • Can the desk use, lend, stake or rehypothecate them?
Build warning: an omnibus wallet is not merely a technical choice. It can change the authorisation route. Settle custody and insolvency treatment before integrating wallets, ledgers and banking rails.

7. Payment tokens versus securities

FINMA classifies cryptoassets by their economic function. Payment tokens are intended as means of payment or value transfer. Asset tokens represent rights comparable to debt, equity or derivatives and may qualify as securities. Utility and hybrid tokens require analysis of their actual function. [5]

An OTC desk limited to widely used payment tokens may remain within an AML-focused model, subject to its custody and settlement design. A desk trading tokenised shares, debt, funds, structured products or derivatives can move into securities regulation.

FINMA states that securities firms can include professional client dealers, certain own-account dealers and market makers, as well as issuing houses and derivatives firms. The licensing requirements include Swiss management, organisation, capital and a precise description of the business. [8]

Maintain an approved token-admission process. It should record the token's function, issuer, rights, transfer restrictions, market, sanctions exposure, blockchain risk and conclusion under Swiss law. Commercial teams should not add a token solely because a liquidity provider can quote it.

8. What the SRO application needs to explain

Each SRO has its own forms, regulations, fee model and admission practice. The application should nevertheless allow the reviewer to understand the company, its people, services, controls and transaction flows without reconstructing the business from marketing materials.

Application areaOTC-specific evidenceCommon weakness
Corporate structureRegister documents, articles, ownership chart, beneficial owners, directors and signatories.Ownership evidence does not reach the natural-person level.
Business modelPrincipal/agency capacity, customer types, tokens, countries, pricing and liquidity providers.Application says “brokerage” but flows show custody or principal trading.
Funds flowFiat accounts, wallets, settlement steps, reconciliation and title transfer.Diagrams omit temporary control of customer money or crypto.
GovernanceBoard oversight, management, AML officer, deputy and escalation authority.AML responsibility is outsourced without internal ownership.
AML frameworkRisk assessment, onboarding, beneficial ownership, PEP, sanctions, monitoring and reporting.Generic manual does not address OTC trades or wallets.
TechnologyOrder records, blockchain analytics, wallet controls, access rights, logs and retention.Vendor names are listed without explaining how exceptions are handled.
OutsourcingKYC, analytics, custody, liquidity, cloud and banking-provider responsibilities.The company assumes outsourcing transfers regulatory accountability.
Banking readinessTarget banks, account purposes, projected volumes, corridors and settlement evidence.The regulatory model depends on an account type that no bank has agreed to support.

9. AML controls for OTC trading

The AML programme must reflect the desk's customer base and transaction pattern. High-value negotiated trades create risks that differ from low-value retail exchange. The desk should understand the customer, beneficial owner, purpose of the relationship, expected trade size, source of wealth where relevant, source of funds and destination of assets.

Risk factors can include:

  • opaque holding companies, trusts or nominee structures;
  • customers acting for undisclosed third parties;
  • rapid changes in settlement instructions;
  • high-risk jurisdictions or sanctions exposure;
  • privacy-enhancing services, mixers or obfuscation patterns;
  • funds arriving from an unrelated bank account or wallet;
  • newly created wallets receiving high-value inbound transfers;
  • transactions inconsistent with the customer's business or wealth; and
  • pressure to split, reroute or accelerate settlement after compliance questions.

The case file should retain the alert, supporting data, analyst reasoning, escalation and final decision. A blockchain-risk score without an investigation record does not explain why the trade was accepted.

AMLA also requires records that allow a qualified third party to assess transactions and compliance. Records must be kept for at least ten years after the relationship or transaction ends, and required customer data must be reviewed and updated on a risk basis. [3]

10. Travel Rule and external wallets

FINMA applies payment-information requirements to blockchain transfers. Its Guidance 02/2019 established a strict approach to the Travel Rule, and subsequent FINMA materials continue to emphasise originator and beneficiary information and the treatment of external wallets. [6]

The desk should decide before launch:

  • which transfers are VASP-to-VASP and which involve self-hosted wallets;
  • how originator and beneficiary data are collected, verified and transmitted;
  • how the customer's control of an external wallet is established;
  • how missing or inconsistent Travel Rule data are handled;
  • which blockchains, assets and counterparties are supported; and
  • how rejected, returned or frozen transfers are recorded.

The commercial promise “settlement to any wallet” should not be made until compliance can support it. Wallet verification, counterparty due diligence and data exchange must work within the promised execution time.

11. Choose an SRO for the actual model

FINMA's recognised list contained 11 SROs in its 2026 publication. Recognition does not make every SRO interchangeable. Admission scope, language, crypto experience, fees, audit model, documentation and appetite for the proposed business can differ. [9]

The selection process should test:

  1. whether the SRO accepts the legal form and specific OTC activities;
  2. whether it has experience with crypto exchange, custody and blockchain controls;
  3. which people must be resident, employed or available in Switzerland;
  4. the application, membership, audit and training costs;
  5. the expected application evidence and clarification process;
  6. the audit cycle and accepted auditors;
  7. change-notification requirements; and
  8. the languages used for filings, training and supervision.

Do not choose from price alone. A low application fee does not help if the SRO will not admit the model or expects an operating structure the company cannot maintain.

12. Banking and settlement readiness

SRO membership does not guarantee a bank account. The bank performs its own risk assessment and may review ownership, management experience, source of capital, customer locations, supported assets, transaction sizes, liquidity providers, exchanges, wallets, sanctions controls and projected flows.

The banking pack should be consistent with the SRO application:

  • one approved description of the business model;
  • one ownership and management data set;
  • one funds-flow diagram for each product;
  • reconciled customer, country and volume assumptions;
  • clear purposes for every fiat and crypto account;
  • named liquidity and custody counterparties;
  • AML, sanctions and blockchain-monitoring evidence; and
  • a launch plan that does not rely on unconfirmed account functionality.

An OTC desk should also plan liquidity concentration, prefunding, failed settlement, price volatility and counterparty default. These are commercial risks, but weak controls can undermine the regulatory and banking assessment.

13. A realistic launch sequence

PhaseWorkstreamExit condition
1. PerimeterClassify tokens, principal/agency capacity, custody, fiat flow and execution model.Written conclusion on SRO, FinTech, banking, securities and market-infrastructure exposure.
2. StructureConfirm legal entity, ownership, directors, management and Swiss operating substance.Applicant and governance structure accepted as workable.
3. CounterpartiesAssess banks, liquidity providers, exchanges, custodians and technology vendors.Target infrastructure supports the stated funds flow.
4. ControlsBuild AML, sanctions, Travel Rule, wallet, monitoring, reporting and record-keeping procedures.Controls are testable on realistic OTC cases.
5. ApplicationSubmit the SRO file and answer model, governance and control questions consistently.Membership confirmed for the intended activities.
6. BankingComplete account opening, settlement, reconciliation and access controls.Live providers support the approved operating model.
7. LaunchRun an end-to-end rehearsal and approve the supported tokens, customers and jurisdictions.Management documents readiness and launches within the admitted perimeter.

Timelines vary by SRO, ownership complexity, business model, documentation and response speed. Avoid marketing a fixed approval date before the selected SRO has reviewed the model and evidence requirements.

14. Swiss crypto OTC desk checklist

  1. Define whether the desk trades as principal, agent or both.
  2. Classify every supported token as payment, utility, asset or hybrid.
  3. Map fiat and crypto flows from instruction to final settlement.
  4. Identify every point where the desk controls customer assets or keys.
  5. Decide between individual custody, collective custody or no custody.
  6. Assess public-deposit, FinTech and banking-licence exposure.
  7. Assess securities-firm, derivatives and trading-venue exposure.
  8. Confirm the Swiss applicant, governance and operating substance.
  9. Select an SRO that accepts the actual model.
  10. Prepare ownership, management and fit-and-proper evidence.
  11. Write an OTC-specific AML risk assessment and manual.
  12. Implement customer, beneficial-owner, PEP and sanctions controls.
  13. Implement blockchain analytics and documented alert investigations.
  14. Implement Travel Rule and external-wallet procedures.
  15. Contract and assess liquidity, custody and technology providers.
  16. Align bank accounts and settlement mechanics with the SRO file.
  17. Test order, pricing, wallet, settlement and reconciliation records.
  18. Prepare the ongoing training, audit and change-reporting calendar.

Frequently asked questions

Does Switzerland have a specific crypto OTC licence?

No single authorisation is called a crypto OTC licence. The route depends on the services, token types, custody and settlement structure. A payment-token desk may require SRO membership for AML supervision, while deposits, collective custody, securities or trading-venue activity can trigger higher authorisation.

Can an SRO member trade crypto for customers?

SRO-supervised firms commonly provide exchange services, but membership only covers the activities admitted by the SRO and does not override banking, securities or market-infrastructure rules. The exact model must be classified first. [1, 7]

Does an OTC desk need a FinTech licence?

Potentially. FINMA states that a FinTech licence can apply where a company accepts public deposits up to CHF 100 million or takes collective custody of cryptoassets, provided the statutory conditions are met. An OTC desk without those features may follow a different route. [4]

Can the desk use an omnibus wallet?

It should not assume that SRO membership is sufficient. Collective custody can create FinTech or banking-licence exposure. The wallet, ledger and insolvency treatment should be analysed before implementation.

Are stablecoins treated like ordinary payment tokens?

Not automatically. FINMA assesses the economic function, reserve, redemption promise, issuer and legal rights. A stablecoin can create payment, deposit, collective-investment or securities questions depending on its design.

Can an OTC desk trade tokenised securities with SRO membership only?

SRO membership alone may be insufficient. Asset tokens can qualify as securities, and professional client dealing, market making, derivatives or operation of a trading facility can require FINMA authorisation. [5, 8]

Does SRO membership guarantee banking?

No. Banks make an independent onboarding decision. The strongest application aligns the SRO perimeter, ownership, transaction flows, AML controls, liquidity providers and projected volumes with the requested accounts.

How long does it take to launch a Swiss OTC desk?

There is no reliable universal period. Structure, SRO selection, ownership, regulatory perimeter, application quality, banking, providers and control implementation all affect readiness. Plan the launch around completed dependencies rather than a fixed marketing date.

Related DM Strategy guides

Key primary sources

RefPrimary source
1FINMA: Self-regulatory organisations, SRO membership, AML supervision and the distinction from FINMA-licensed institutions.
2FINMA: FinTech financial services providers, AMLA scope for virtual-currency trading and the requirement to assess higher authorisations.
3Swiss Anti-Money Laundering Act, financial-intermediary scope, due diligence, records and organisation.
4FINMA: FinTech licence and FINMA Guidance 08/2023, public deposits and collective custody of cryptoassets.
5FINMA: Cryptoassets fact sheet, token categories and the need for case-specific authorisation analysis.
6FINMA Guidance 02/2019: Payments on the blockchain, Travel Rule and wallet-transfer expectations.
7FINMA Annual Report 2024, activities of SRO-affiliated virtual-asset service providers.
8FINMA: Authorisation requirements for securities firms, client dealing, market making, issuing and derivatives activities.
9FINMA: SRO member search and recognised SRO list, current recognised organisations and member verification.

Disclaimer

This article is for information only and is not legal, tax, regulatory or banking advice. The applicable Swiss requirements depend on the legal entity, services, token classification, customer location, principal or agency role, custody, funds flow, execution model and counterparties. Laws, supervisory practice and SRO rules can change. Confirm the current position before filing, building or launching.

DM Strategy helps crypto founders classify Swiss OTC and brokerage models, select the appropriate SRO or FINMA route, prepare application evidence, build AML and Travel Rule controls and align the regulatory file with banking, custody and liquidity infrastructure. If you are planning a Swiss crypto OTC desk, book an introductory call with DM Strategy before the custody and settlement architecture is fixed.

Author:
Dionisijs Markovs

Interested in a conversation?